Privacy Policy
Last updated: July 31, 2026
This policy explains how Tapped Decks("Tapped Decks", "we", "us", "our"), the operator of tappeddecks.com, collects, uses, shares, and protects your personal information, and the rights you have over it. We are the data controller for the personal data described below. You can reach us about privacy at support@tappeddecks.com.
What Data We Collect
Account information
Your email address (for authentication and account recovery), and a username and profile details if you choose to add them.
Deck & activity data
The decks you build, save, and publish (card selections, names, descriptions), plus votes, comments, reviews, collection data, and product feedback you submit — such as the thumbs up/down rating and any note you leave on a generated deck or upgrade — that you create on the platform.
Payment & billing data
If you subscribe to a paid plan, your payment is processed by Stripe. We do not see or store your full card number — Stripe does. We store your subscription status, plan, Stripe customer/subscription identifiers, and billing period so we can provide the service you paid for.
Usage & device data
Basic analytics about how the site is used — pages visited, features used, referrer, and approximate location and device/browser type — collected via privacy-friendly analytics (see Cookies & Analytics below) to help us improve the product.
IP address
We process your IP address (and, for anonymous users, a one-way hash of it) to operate the service securely — rate-limiting, preventing abuse, and metering free-tier usage. IP data is not used to build advertising profiles.
Communications
If you email us or submit a support request, we keep that correspondence to help you.
Why We Process It (Legal Bases)
To provide the service (contract)
Creating your account, building/saving decks, and delivering paid features you subscribe to.
Legitimate interests
Keeping the platform secure and abuse-free, understanding aggregate usage, and improving the product — balanced against your rights.
Consent
Optional marketing emails, which you can withdraw at any time. Withdrawing consent does not affect your use of the service.
Legal obligation
Meeting tax, accounting, and other legal requirements associated with paid subscriptions.
Third-Party Services We Share Data With
We use the following processors to run Tapped Decks. We do not sell your personal data.
Supabase — authentication & database
Stores your email, account, and deck data securely.
Stripe — payments
Processes subscription payments. Receives your email and a user identifier; handles and stores your card details under its own PCI-compliant policies.
Anthropic (Claude) — AI features
Powers AI deck building. Your deck preferences and the prompts you type are sent to Anthropic to generate recommendations. We do not deliberately send your account identifiers; please don't include personal information in free-text prompts.
Vercel — hosting & analytics
Hosts the site and provides cookieless usage/performance analytics (aggregate page views, device type, approximate geography, performance metrics).
Resend & Zoho — email
Send transactional and (if you opt in) marketing emails, and route your replies. They receive your email address.
Scryfall, TCGplayer, EDHREC — card data
Provide Magic: The Gathering card data, images, prices, and synergy data. No personal user data is sent to these services.
Cookies & Analytics
We use essential cookies only — the authentication cookies required to keep you signed in. We do not use advertising cookies and we do not sell your data to advertisers. For product analytics we use Vercel's privacy-friendly, cookieless analytics, which measures aggregate usage and performance without tracking you across other websites and without storing tracking cookies on your device.
International Data Transfers
Several of our processors (including Supabase, Stripe, Anthropic, Vercel, and Resend) are based in or process data in the United States. If you are in the UK, EU, or elsewhere, your data may be transferred to and processed in the United States. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How Long We Keep Data
We keep your account and deck data for as long as your account is active. If you delete your account, we remove your personal data, saved decks, and comments (published community decks may be anonymised rather than deleted). Billing records are retained as long as required for tax and accounting purposes. Security logs and hashed IP data are kept only as long as needed for abuse prevention.
Your Rights
Access & portability
You can view your data in the app at any time, and export your account and deck data from your account page.
Correction
You can update your account information and profile at any time.
Deletion
You can permanently delete your account and associated data yourself from your account page, or by contacting us — we action requests within 30 days.
Object / restrict / withdraw consent
You can object to or restrict certain processing, and withdraw marketing consent from your account preferences or via the unsubscribe link in any marketing email.
California (CCPA/CPRA)
California residents have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA.
Complaints
UK/EU users have the right to lodge a complaint with their local data protection authority.
Children
Tapped Decks is not directed to children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will delete it.
Affiliate Links
Some "Buy" links to TCGplayer are affiliate links, meaning we may earn a small commission if you make a purchase — at no extra cost to you. Following these links takes you to a third-party site governed by its own privacy policy.
Changes to This Policy
We may update this policy from time to time. We'll update the "Last updated" date above, and for material changes we'll take reasonable steps to notify you.
Contact Us
Questions about this Privacy Policy? Contact us at support@tappeddecks.com.